Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
File:                     Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft (raw, json)
Hash identifier:          BhxoWX3+aQ144a6nzDufXA8/RsACgyMx/CxHSJJlI2Q=
Subject key identifier:   28:CF:8A:8E:6F:D1:B6:D8:84:91:71:53:E7:BD:86:71:99:7C:60:2F
Authority key identifier: 0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
Certificate issuer:       /CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Certificate serial:       0195477F0F4A883BF301679EA0F9EDA4CBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
Manifest number:          05C5
Signing time:             Thu 27 Feb 2025 13:01:04 +0000
Manifest this update:     Thu 27 Feb 2025 13:01:04 +0000
Manifest next update:     Fri 28 Feb 2025 13:01:04 +0000
Files and hashes:         1: Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl (hash: 6fbyie6OBI0atGWNc8W1r+dZ7kK4ZZb7e9byNKMsUGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7f:0f:4a:88:3b:f3:01:67:9e:a0:f9:ed:a4:cb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
        Validity
            Not Before: Feb 27 13:01:04 2025 GMT
            Not After : Feb 28 13:01:04 2025 GMT
        Subject: CN=28cf8a8e6fd1b6d884917153e7bd8671997c602f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:89:6b:da:1d:a9:db:f0:3d:39:15:5a:22:
                    5b:93:cc:86:2d:d1:68:f6:3e:a1:96:a9:6b:3c:04:
                    da:12:ab:0a:37:c1:3f:2b:d7:0d:a6:61:22:c0:dc:
                    52:74:77:fe:ea:4d:56:29:20:14:9b:f7:bd:06:81:
                    88:11:68:b3:0a:47:c9:c2:9d:24:64:ac:62:75:06:
                    23:46:9a:1b:d2:6a:98:59:53:c1:3d:18:34:0b:ac:
                    ba:2f:23:d7:61:e8:39:b3:68:dd:30:c2:85:27:25:
                    b7:1a:0c:6b:b8:90:82:28:3c:f6:b9:bb:27:7b:6b:
                    03:d2:d4:92:8f:70:b0:27:51:ec:d2:c8:59:df:a9:
                    1d:aa:e7:9f:19:cc:f1:d0:a6:f4:f8:b5:e9:13:c8:
                    04:84:c1:d3:0e:52:1b:e7:e0:d2:62:35:a9:3a:c1:
                    ff:52:cf:35:32:aa:a9:3a:51:28:95:c1:7a:62:17:
                    1c:2f:f2:f2:64:e4:d3:c4:d9:b9:44:f4:5f:8f:61:
                    83:d9:c3:4b:dd:d1:3a:39:af:6a:e4:7e:25:a4:1d:
                    f9:26:cb:10:c6:d9:f2:2b:d7:98:f6:87:35:0b:0e:
                    a5:69:23:59:3f:e0:f5:42:0a:a6:91:e5:a2:73:78:
                    84:34:4e:29:ee:ff:4e:79:b9:2c:33:bb:fa:62:23:
                    7e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:8A:8E:6F:D1:B6:D8:84:91:71:53:E7:BD:86:71:99:7C:60:2F
            X509v3 Authority Key Identifier:
                keyid:0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:b0:17:4c:ab:49:23:98:9b:37:ac:1f:24:25:37:42:72:
         d4:2b:9b:88:fc:db:1b:f5:58:1a:df:8d:de:e0:ea:fd:c2:07:
         52:82:7c:3b:71:52:c5:fe:33:48:fd:37:78:88:13:4e:ee:d1:
         44:fc:99:73:13:e6:8f:3a:6d:79:5f:86:f5:d0:d3:82:52:a3:
         c8:48:49:c6:00:19:11:c1:64:c2:ef:07:0f:4e:8f:5a:89:45:
         5f:55:46:4f:e0:9d:cb:53:14:b2:2a:bd:71:5b:dd:a5:2b:e8:
         93:ed:92:39:3b:4b:6c:04:2d:2f:85:b2:55:00:ce:aa:84:05:
         3b:a7:f5:ba:88:03:75:f7:4e:3d:17:de:d6:e9:7e:8c:96:e1:
         9e:19:53:81:a0:7c:54:fe:c1:f9:01:5b:35:91:84:83:6b:d0:
         cf:cb:14:f0:76:26:64:64:58:ec:c0:ad:61:dc:ec:5f:55:39:
         93:35:8e:75:c7:1a:db:2a:c7:69:22:0c:80:98:73:44:31:48:
         b6:29:04:71:70:cf:ec:9c:f8:b1:8d:68:dc:2f:b8:9f:9f:d9:
         20:1d:67:50:e5:f2:2a:6d:d0:37:c2:1b:b0:b7:d4:b7:8a:70:
         83:97:6a:2c:a1:5c:52:bf:3b:1d:fa:a5:69:04:0a:10:35:53:
         0a:ba:df:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVHfw9KiDvzAWeeoPntpMu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGY0YjAwMDkyYmJlM2I4ZjEzZmRkZDRlZmM3YTU2ZDVk
NTlhMjAwHhcNMjUwMjI3MTMwMTA0WhcNMjUwMjI4MTMwMTA0WjAzMTEwLwYDVQQD
EygyOGNmOGE4ZTZmZDFiNmQ4ODQ5MTcxNTNlN2JkODY3MTk5N2M2MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CeJa9odqdvwPTkVWiJbk8yGLdFo
9j6hlqlrPATaEqsKN8E/K9cNpmEiwNxSdHf+6k1WKSAUm/e9BoGIEWizCkfJwp0k
ZKxidQYjRpob0mqYWVPBPRg0C6y6LyPXYeg5s2jdMMKFJyW3GgxruJCCKDz2ubsn
e2sD0tSSj3CwJ1Hs0shZ36kdquefGczx0Kb0+LXpE8gEhMHTDlIb5+DSYjWpOsH/
Us81MqqpOlEolcF6YhccL/LyZOTTxNm5RPRfj2GD2cNL3dE6Oa9q5H4lpB35JssQ
xtnyK9eY9oc1Cw6laSNZP+D1QgqmkeWic3iENE4p7v9OebksM7v6YiN+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjPio5v0bbYhJFxU+e9hnGZfGAvMB8GA1UdIwQY
MBaAFAqPSwAJK747jxP93U78elbV1ZogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ285TEFBa3J2anVQRV8zZFR2eDZWdFhWbWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85MzlkNmItZGZmOC00OGJjLWJhMjQt
NmI0MThmNjMwOTdlLzEvQ285TEFBa3J2anVQRV8zZFR2eDZWdFhWbWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85MzlkNmItZGZmOC00OGJjLWJhMjQtNmI0MThmNjMwOTdl
LzEvQ285TEFBa3J2anVQRV8zZFR2eDZWdFhWbWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTuwF0yr
SSOYmzesHyQlN0Jy1CubiPzbG/VYGt+N3uDq/cIHUoJ8O3FSxf4zSP03eIgTTu7R
RPyZcxPmjzpteV+G9dDTglKjyEhJxgAZEcFkwu8HD06PWolFX1VGT+Cdy1MUsiq9
cVvdpSvok+2SOTtLbAQtL4WyVQDOqoQFO6f1uogDdfdOPRfe1ul+jJbhnhlTgaB8
VP7B+QFbNZGEg2vQz8sU8HYmZGRY7MCtYdzsX1U5kzWOdcca2yrHaSIMgJhzRDFI
tikEcXDP7Jz4sY1o3C+4n5/ZIB1nUOXyKm3QN8IbsLfUt4pwg5dqLKFcUr87Hfql
aQQKEDVTCrrfwA==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:58 2025 by rpki-client on console.sobornost.net